Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1. (Currently Amended) A device for the redundant voltage supply of safety- 
relevant systems , i n part i cular i n motor v e h i c le s, having: 

at least one first drive device (4), one second drive device (3) and one 
third drive device (3), each of these drive devices being designed to drive r e lays 
switches in a felay switching unit (4) for switching over voltage supplies of safety- 
relevant systems 
charact e r i z e d i n that wh e r ei n 

the drive devices (1, 2, 3) are connected to a communication channel 

the first and second drive devices (1, 2) each have a device for monitoring a 
voltage applied to the safety-relevant systems (6), 

the first drive device (4)-can trigger a switching process of the te\ay 
switching unit (4) and output a request message (Anf1) to the communication 
channel £44} if the device for monitoring a voltage applied to the safety-relevant 
systems {£} detects that no voltage is applied; 

the second drive device (2) has a device for checking whether the first 
drive device has driven and switched the felay switching unit (4), and, if the device 
for checking determines that the first drive device has not driven or has not switched 
the felay switching unit, and the device for monitoring a voltage applied to the safety- 
relevant systems (5) detects that no voltage is applied, said second drive device can 
trigger a switching process of the fetey switching unit (4) and, if it is not possible to 
trigger a switching process of the felay switching unit (4), can output a further 
request message (Anf2) to the communication channel (44), 

and 

the third drive device (3) can receive from the communication channel 
(44) the request messages (Anf1, Anf2) from the first and second drive devices (4-r-2) 
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and can trigger a switching process of the relay switching unit (4) when both request 
messages (Anf1, Anf2) are received. 



2. (Currently Amended) The device as claimed in claim 1, char a ct e r i z e d i n 
that wherein the switching anoth e r unit for switching over voltages can a l so b e us e d 
i n pl a c o of th o is a relay unit (4) having relays. 

3 (Currently Amended) The device as claimed in claim 2 char a ct e riz e d i n that 
wherein the communication channel (44) is a CAN bus. 

4. (Currently Amended) A method for the redundant voltage supply of safety- 
relevant systems , i n part i cu l ar in motor v e hic le s, charact e r i z e d by the following 
steps: 

(51) a first drive device (1) monitors via a first line (Sp1) whether a 
voltage can be detected across one or more safety-relevant systems (5); r e turn to 
th e st a rt and continues the monitoring if this is the case; 

(52) if it is determined in step S1 that no voltage is applied to one or more 
safety-relevant systems (§), the first drive device (4) drives a relay unit (4) by means 
of a first control signal (St4) so that a voltage is again applied to the safety-relevant 
system or systems (£); 

(53) the first drive device (4) outputs to a communication channel (44) a 
first request message (Anf1) which states that it is necessary to switch over at least 
one relay of the relay unit (4)-in order to supply voltage; 

(54) the a second drive device (2) receives the first request message 

(Anf1); 

(55) the second drive device (2) checks whether the first drive device (4) 
has successfully driven/switched over the relay unit (4); return to th e start step S1 if 
this is the case; 

(56) the second drive device (2) determines via a second line (Sp2) 
whether a voltage is applied to one or more safety-relevant systems (§); return to the 
start step S1 in the affirmative; 
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(57) check whether it is possible for the second drive device (2) to 
drive/switch the relay unit (4f in the negative case; 

(58) the second drive device (2) drives/switches the relay unit (4) by 
means of a second control signal (St2) if driving/switching is judged to be possible in 
step S7, then return to the start step S1 ; 

(59) the second drive device (2) outputs a second request message 
(Anf2) to the communication channel (44) if it is not possible for the second drive 
device (2) to drive/switch the relay unit (4) for whatever reasons, for e x a mp le 
including due to an interruption in the line for the second control signal; 

(510) the a third drive device (3) receives the second request message 
(Anf2) from the second drive device (2) together with the first request message 
(Anf1) from the first drive device (4); 

(51 1) the third drive device (3) drives/switches the relay unit (4) by means 
of a third control signal (St3); then return to step S1 th e st art. 

5. (Currently Amended) The device as claimed in claim 1 charact e r i z e d in 
that wherein the communication channel (44) is a CAN bus. 

6. (New) The device as claimed in claim 1 wherein the safety relevant 
systems are systems of a motor vehicle. 

7. (New) The method as claimed in claim 4 wherein the safety relevant 
systems are systems of a motor vehicle. 
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